This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft File: GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft (raw, json) Hash identifier: Lz3ajutWrQIHguMjbiGBecFeklg+GvcjxSbzfSSX+N0= Subject key identifier: 83:08:F3:41:8C:A1:EB:65:85:2A:7D:17:58:3B:4A:69:E8:10:51:D0 Authority key identifier: 1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D Certificate issuer: /CN=A91519CC/serialNumber=1B3683525944774388853090D1005BB51552246D Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft Manifest number: 07 Signing time: Fri 19 Dec 2025 07:02:26 +0000 Manifest this update: Fri 19 Dec 2025 07:02:26 +0000 Manifest next update: Fri 26 Dec 2025 07:02:26 +0000 Files and hashes: 1: GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl (hash: pnSTckkoi99OG1NshsRIpz3QxYzwXOSKrwfaMKKtsBE=) 2: 9C9F0DC6DA5A11F08EBD209195D3641D.roa (hash: douuChwE4cVa4UY5ZnkV63EgeOMAXa3nKvyfzbnBXGs=) 3: 9D232386DA5A11F08EBD209195D3641D.roa (hash: Rmvf5m6wTJZAAz9CAshRRcE38nTYZ3UTi77IHZ61FEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91519CC, serialNumber=1B3683525944774388853090D1005BB51552246D Validity Not Before: Dec 19 07:02:26 2025 GMT Not After : Dec 26 07:02:26 2025 GMT Subject: CN=6944f882-2b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bd:a7:52:1c:82:5d:89:ce:5b:d0:db:ed:87: de:6c:d0:a0:91:5b:e8:bb:de:52:be:ba:2e:04:e3: 2c:09:6e:55:f8:c8:57:13:65:51:a2:b3:8f:01:21: 03:46:7f:6c:3f:21:54:aa:91:d3:22:53:9e:80:d0: 03:dd:8b:3f:6f:b2:fa:ef:e6:1d:fd:eb:77:9a:18: f7:70:bc:fb:b5:74:2d:c2:f0:00:b4:2a:ee:b3:2a: ed:f3:13:a2:b6:e1:3b:30:06:e8:81:74:65:d3:8b: e2:33:ff:77:a7:fa:8c:38:a8:d1:99:c9:78:82:37: d1:e6:61:b1:d9:d3:7e:28:0b:5d:f6:1a:95:10:cb: 71:56:4e:a6:29:8b:54:44:7e:f5:47:bf:f5:3e:32: 0c:cb:e5:fd:84:04:a0:29:29:dd:49:1c:3e:c3:42: 02:3b:ae:74:e5:96:62:a1:01:ff:b0:0d:70:ad:d4: 1f:1b:cb:ad:e7:ce:77:d3:bc:fe:85:0e:2f:d9:9e: 9b:19:c1:89:3f:2a:a6:5a:59:07:a5:8b:30:47:cf: 03:29:b5:36:cd:5f:69:f8:95:d3:3f:cf:1f:87:91: 80:18:e7:28:2e:ea:ea:17:cf:5a:2d:2c:58:bd:59: 5e:8b:a7:8d:77:81:a3:48:cb:38:46:b3:c8:dd:32: 90:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:08:F3:41:8C:A1:EB:65:85:2A:7D:17:58:3B:4A:69:E8:10:51:D0 X509v3 Authority Key Identifier: keyid:1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:7b:3a:87:bb:10:8a:2b:bc:62:ec:dc:b6:25:23:44:bd:e1: 28:4a:0f:39:23:72:4c:ea:14:73:5e:99:ba:df:ef:b2:7f:40: 62:d9:07:ba:7e:8c:12:8d:e1:c6:2a:e8:a4:ae:0d:58:5d:47: 95:c7:8a:7c:41:22:fd:86:70:b9:67:5b:0d:20:54:eb:c4:0d: c5:97:d1:c5:3f:07:46:65:f5:42:29:e7:cb:e0:d1:3b:f6:f9: 6a:f4:73:d9:ad:6d:3a:fb:c0:3f:3f:72:84:1e:33:15:52:4c: 5d:c6:12:e6:bb:2b:0d:f6:bf:57:03:59:5d:42:da:cf:36:b2: aa:1e:dd:3d:99:61:57:ce:aa:58:18:51:d1:c5:89:af:ed:40: e9:10:01:ed:07:5a:b7:3b:e9:4d:a4:2c:c2:d8:4e:97:a3:06: 3d:08:31:e1:a1:5b:cc:03:07:a7:5c:a3:45:8b:07:24:aa:08: 79:f0:12:3a:cc:98:98:6c:6e:c3:a9:a5:96:d4:84:7b:fc:96: 95:5e:46:10:e0:21:96:1e:33:14:e0:8d:8e:5e:79:ab:ce:66: 37:46:4d:8f:a7:dc:95:13:7b:98:ae:21:e9:83:56:25:28:46: 37:06:13:b2:bd:19:de:53:d0:97:4f:92:b4:9a:86:68:9e:ce: 6a:49:da:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTlDQzExMC8GA1UEBRMoMUIzNjgzNTI1OTQ0Nzc0Mzg4ODUzMDkwRDEwMDVCQjUx NTUyMjQ2RDAeFw0yNTEyMTkwNzAyMjZaFw0yNTEyMjYwNzAyMjZaMBgxFjAUBgNV BAMMDTY5NDRmODgyLTJiOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtvadSHIJdic5b0Nvth95s0KCRW+i73lK+ui4E4ywJblX4yFcTZVGis48BIQNG f2w/IVSqkdMiU56A0APdiz9vsvrv5h3963eaGPdwvPu1dC3C8AC0Ku6zKu3zE6K2 4TswBuiBdGXTi+Iz/3en+ow4qNGZyXiCN9HmYbHZ034oC132GpUQy3FWTqYpi1RE fvVHv/U+MgzL5f2EBKApKd1JHD7DQgI7rnTllmKhAf+wDXCt1B8by63nznfTvP6F Di/ZnpsZwYk/KqZaWQelizBHzwMptTbNX2n4ldM/zx+HkYAY5ygu6uoXz1otLFi9 WV6Lp413gaNIyzhGs8jdMpDtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgwjzQYyh 62WFKn0XWDtKaegQUdAwHwYDVR0jBBgwFoAUGzaDUllEd0OIhTCQ0QBbtRVSJG0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxOUNDLzk5MTRCOEU0REEx RjExRjBBQjgyMEZGNzg0RDM2NDFEL0d6YURVbGxFZDBPSWhUQ1EwUUJidFJWU0pH MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR3phRFVsbEVkME9JaFRDUTBRQmJ0UlZTSkcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx OUNDLzk5MTRCOEU0REExRjExRjBBQjgyMEZGNzg0RDM2NDFEL0d6YURVbGxFZDBP SWhUQ1EwUUJidFJWU0pHMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJh7Ooe7EIorvGLs3LYlI0S94ShKDzkjckzqFHNembrf77J/QGLZB7p+ jBKN4cYq6KSuDVhdR5XHinxBIv2GcLlnWw0gVOvEDcWX0cU/B0Zl9UIp58vg0Tv2 +Wr0c9mtbTr7wD8/coQeMxVSTF3GEua7Kw32v1cDWV1C2s82sqoe3T2ZYVfOqlgY UdHFia/tQOkQAe0HWrc76U2kLMLYTpejBj0IMeGhW8wDB6dco0WLBySqCHnwEjrM mJhsbsOppZbUhHv8lpVeRhDgIZYeMxTgjY5eeavOZjdGTY+n3JUTe5iuIemDViUo RjcGE7K9Gd5T0JdPkrSahmiezmpJ2lE= -----END CERTIFICATE-----Generated at Sat Dec 20 00:58:35 2025 by rpki-client